Privacy Policy
Last updated: 22 May 2026
1. Overview
Football Solitaire ("the app," "we," "us," or "our") is a puzzle game. This Privacy Policy describes what data we collect and process when you use the mobile app and related web pages.
We do not require an account to play. Optional leaderboard features use a random device identifier.
The app is operated by an individual based in Santa Clarita, California, USA. If you are located in the European Union, United Kingdom, or another jurisdiction with applicable privacy laws, please see the relevant sections below.
2. Data We Collect
2.1 Device Identifier
A randomly generated UUID (universally unique identifier) is created when you first open the app and stored on your device. It is used for leaderboard participation and the optional daily surprise puzzle feature. This identifier resets if you uninstall and reinstall the app. It is not linked to your name, email address, or any other personally identifying information unless you choose to add a display name.
2.2 Display Name (Optional)
If you choose to participate in leaderboards, you may enter a display name of up to 48 characters. This is visible to other users. You may skip this entirely or use a pseudonym.
2.3 Gameplay Data (On Device Only)
Puzzle progress (including which puzzles you have completed, across easy, medium, and hard difficulty levels), settings, and language preference are stored locally on your device. This data never leaves your device except as described in this policy.
2.4 Purchase Status
If you purchase the full game unlock, our payment partner RevenueCat processes the transaction through the Apple App Store or Google Play. We receive only your entitlement status (i.e., whether you have purchased the unlock) — we never receive your card number, billing address, or payment details.
2.5 Advertising Data (Free Version Only)
If you use the free version of the app, Google AdMob may collect device advertising data to serve relevant ads. This may include:
- Advertising identifier (IDFA on iOS, GAID on Android)
- IP address and general (city-level) location derived from it
- Device model and operating system version
- Ad interaction data (impressions, clicks)
On iOS, you see Apple's App Tracking Transparency (ATT) prompt before any advertising identifier is accessed. You can decline tracking; ads may still be shown, but they will not be personalised.
On Android, we show a consent flow (including Google's User Messaging Platform where required in your region) before serving personalised ads. You can accept or decline and change ad personalisation choices through your device and Google account settings.
Google's privacy policy applies to AdMob data: https://policies.google.com/privacy
2.6 Support Communications
If you contact us by email, we receive the content of your message and your email address. We use this solely to respond to your request.
3. How We Use Data
| Data | Purpose |
|---|---|
| Device identifier | Leaderboard sync, daily surprise puzzle feature |
| Display name | Displaying your leaderboard ranking to other users |
| Purchase status | Unlocking paid features |
| Advertising data | Serving ads to free users via AdMob |
| Support email | Responding to your support request |
We do not sell your personal information to any third party.
We do not use your data to build profiles for marketing, to make automated decisions that significantly affect you, or for any purpose not described in this policy.
4. Legal Basis for Processing (EEA / UK Users)
If you are located in the European Economic Area (EEA) or United Kingdom, we process your data under the following legal bases:
| Data | Legal Basis |
|---|---|
| Device identifier & leaderboard | Legitimate interests (providing game features) |
| Display name | Consent (you voluntarily enter it) |
| Purchase status | Performance of contract (fulfilling your purchase) |
| Advertising data | Consent (via ATT prompt on iOS; via consent banner / User Messaging Platform on Android where required) |
| Support communications | Legitimate interests (responding to your request) |
5. Third-Party Services
We use the following third-party services. Each processes data under their own privacy policies:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Supabase | Leaderboard scores and display names (hosted on AWS us-east-1, USA) | supabase.com/privacy |
| RevenueCat | In-app purchase validation | revenuecat.com/privacy |
| Google AdMob | Advertising for free users | policies.google.com/privacy |
| Vercel | Hosting for our website and API routes | vercel.com/legal/privacy-policy |
Data transfers: Supabase leaderboard data is stored on servers located in the United States. If you are in the EEA or UK, your data is transferred to the USA. We rely on Supabase's standard contractual clauses and data processing agreements for these transfers.
6. Data Retention
| Data | Retention |
|---|---|
| Leaderboard entries | Retained until you request deletion, or we may periodically remove inactive records at our discretion |
| Local game data | Remains on your device until you uninstall the app or clear app storage |
| Support emails | Retained for up to 2 years, then deleted |
7. Your Rights and Choices
All Users
- Skip the leaderboard: You are never required to enter a display name or participate in leaderboards.
- Delete leaderboard data: You can delete all server-side data tied to your device identifier from in-app Settings → Delete leaderboard data.
- Ad tracking (iOS): Decline tracking via the ATT prompt, or change your choice at any time in iOS Settings → Privacy & Security → Tracking.
- Ad tracking (Android): Opt out via Google Settings → Ads → Delete advertising ID or opt out of personalised ads.
- Restore purchases: Manage your purchase through the app store and use in-app Restore Purchases at any time.
EEA / UK Users (GDPR / UK GDPR)
If you are located in the EEA or UK, you have the following rights regarding your personal data:
- Access: Request a copy of the data we hold about you.
- Rectification: Request correction of inaccurate data.
- Erasure ("right to be forgotten"): Request deletion of your data.
- Portability: Request your data in a machine-readable format.
- Objection: Object to processing based on legitimate interests.
- Restriction: Request that we restrict processing of your data.
To exercise any of these rights, contact us at the email below. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
California Residents (CCPA / CPRA)
California residents have the right to:
- Know what personal information we collect and how it is used.
- Request deletion of personal information we have collected.
- Opt out of the "sale" of personal information — we do not sell personal information.
- Non-discrimination for exercising these rights.
To exercise your California privacy rights, contact us at the email below. We will respond within 45 days.
8. Children
The app is not directed at children under 13, or under 16 where you are a resident of the European Union (or another jurisdiction that sets a higher minimum age). We do not knowingly collect personal information from anyone below the applicable minimum age. If you believe a child below that age has provided us with personal information, please contact us and we will delete it promptly.
9. Push Notifications
We do not currently send push notifications. If we add this feature in a future version, we will update this policy and seek your consent before sending any notifications.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will indicate the date of the latest revision at the top of this page. Continued use of the app after changes take effect constitutes your acceptance of the revised policy. For significant changes, we will provide additional notice where reasonably practicable (such as a notice within the app).
11. Contact
For questions, deletion requests, or to exercise your privacy rights:
Email: support@footballsolitaire.app
For EEA/UK users, we act as the data controller. Our designated contact for data protection matters is reachable at the email address above.